Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/6BBGLWJHxw83phijPljW2YiYsm0.roa
File: 6BBGLWJHxw83phijPljW2YiYsm0.roa (raw, json)
Hash identifier: cMpjDgwbFoJQpQnZ7tMEA/QN0QcAbAMxWhuFWbmHfuA=
Subject key identifier: E8:10:46:2D:62:47:C7:0F:37:A6:18:A3:3E:58:D6:D9:88:98:B2:6D
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 018CC7955DF8E830645321E482AF587AA90D
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/6BBGLWJHxw83phijPljW2YiYsm0.roa
Signing time: Tue 02 Jan 2024 00:31:44 +0000
ROA not before: Tue 02 Jan 2024 00:31:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60118
IP address blocks: 89.42.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:5d:f8:e8:30:64:53:21:e4:82:af:58:7a:a9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:31:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e810462d6247c70f37a618a33e58d6d98898b26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:54:70:b9:78:44:fd:0c:79:e3:ba:6e:46:
9c:97:5b:31:67:4a:99:b1:39:48:56:37:f8:1e:99:
f8:3e:38:b3:1c:40:1c:36:af:31:b0:80:f5:3a:2d:
bf:fd:a3:f7:46:55:b9:43:27:93:3f:4b:3a:d5:80:
40:b3:a3:a7:5d:ae:21:f3:58:77:7c:dc:b1:65:d8:
cf:a9:fd:cc:60:cf:63:d4:77:92:eb:8d:da:b1:ef:
2e:18:8a:47:35:8d:d3:02:cd:a9:64:54:da:18:c5:
71:84:e3:4d:e7:83:1b:6a:78:30:a5:cc:91:ea:71:
b0:0e:cf:56:2a:3b:b3:44:13:0d:67:7b:7b:61:01:
82:e7:73:e4:62:6c:d4:13:e9:42:a9:7d:e1:d8:af:
67:33:af:d5:fb:53:9f:b5:bb:57:46:31:9d:a6:aa:
18:e5:12:fd:47:b1:07:a2:54:5b:b7:42:1b:cd:30:
db:86:b0:2d:51:09:65:f5:47:90:a1:0f:25:39:39:
b7:38:19:21:0d:c6:14:e9:77:53:fd:2a:a2:e0:ec:
c5:e6:11:f8:26:2b:ac:04:fe:1e:71:a8:57:c6:ea:
0c:72:32:3a:45:2f:5a:83:05:15:e4:ce:24:8f:12:
e0:c1:94:f6:8c:90:ee:7b:46:3e:ee:1c:a6:69:8c:
3c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:10:46:2D:62:47:C7:0F:37:A6:18:A3:3E:58:D6:D9:88:98:B2:6D
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/6BBGLWJHxw83phijPljW2YiYsm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.26.0/24
Signature Algorithm: sha256WithRSAEncryption
74:46:ed:18:f2:43:2e:e3:9c:37:86:bb:88:f3:5a:02:39:f2:
69:78:5a:89:95:35:41:40:5e:68:4d:99:db:b3:bd:b2:d1:a7:
10:fc:ca:3f:e1:4e:26:3f:b8:5c:4c:e9:d8:02:ef:90:70:cc:
b8:50:00:80:7d:31:c9:73:a4:7f:14:69:04:1e:d5:6e:9f:0f:
0b:d3:f5:99:14:11:c7:ce:b3:63:cb:42:cb:d3:1b:dd:6a:06:
37:93:82:7f:c2:e7:51:1e:67:53:47:e0:79:39:ef:51:a2:2f:
4c:df:04:ec:91:27:ee:70:20:6d:79:88:f7:7d:fc:b2:ed:30:
a8:e7:4e:dc:3c:31:fa:75:51:ef:dd:20:4a:d0:6a:10:67:6f:
e1:a1:2c:c3:7c:7f:b0:d3:48:27:21:2f:7a:8f:f1:84:74:08:
92:91:b3:9f:b7:65:3c:a9:fd:f5:3b:b3:6c:83:86:e1:e8:6f:
f0:b4:61:f5:6a:15:44:0c:90:da:e1:06:82:61:d1:c0:a5:fa:
8e:13:eb:8a:65:95:5f:b2:a1:58:79:05:e3:77:53:53:7a:60:
30:8a:12:9e:4f:75:d7:34:fd:b0:c0:bf:f0:0c:ac:e3:76:d8:
de:05:13:b1:3c:fe:5c:69:39:61:76:ea:00:69:0d:8c:35:53:
90:82:6d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 14:02:12 2024 by rpki-client on console-ams.rpki-client.org